a group problem?

[Stefan Obermeier <stefan.obermeier [at] biozentrum.uni-wuerzburg.de>]

Hi,

I want to use nss-pam-ldap to get users and groups out of LDAP and use them on linux.

Login and browsing of users and groups with getent works fine.

The mapping of group chair1  and the corresponding members is working becaus all members of chair1 are listed with getent passwd.

The other groups dept01* are shown correctly  but are not assigned to the users.

 

My nslcd.conf

...

filter passwd (&(objectClass=inetOrgPerson)(groupMemberShip=cn=chair1,ou=groups,o=university))

map passwd gecos fullName

map passwd loginShell "/bin/bash"

map passwd homeDirectory "/home/$uid"

map passwd gidNumber "100"

# map group member sAMAccountName

filter group  (&(objectClass=group)(cn=dept01*))

...

 

>getent group

...

dept01-AG1:*:12345:user1,user2 user3

dept01-AG2:*:12346:user2

...

 

>su user1

>groups

users

 

user1> ls -la

drwxrwxr-x        17          user2 dept01-AG1          8192 May 12 18:52 .

drwxr-xr-x          5            root    root                       4096 Nov  3  2017 ..

drwxr-xr-x         2            user3 dep01-AG1           4096 May  2  2019 dir1

 

user1> touch test

touch: cannot touch 'test': Permission denied

 

Could someone please help me.

Thanks

Stefan